CVE-2006-0858: Undefined Security Weakness

Unquoted Windows search path vulnerability in 1 snsmcon.exe, 2 the autostartup mechanism, and 3 an unspecified installation component in StarForce Safe'n'Sec Personal + Anti-Spyware 2.0 and earlier, and possibly other StarForce Safe'n'Sec products, might allow local users to gain privileges via a...

[SA18876] Teca Diary Personal Edition SQL Injection Vulnerability

TITLE: Teca Diary Personal Edition SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18876 VERIFY ADVISORY: http://secunia.com/advisories/18876/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Teca Diary Personal Edition 1.x http://secunia.com/product/8089...

TiVo Detection

The remote host is a TiVo, a personal video recorder. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid20813; scriptversion"1.13"; scriptcvsdate"Date: 2019/11/22"; name"english" = "TiVo Detection"; scriptnameenglish:name"english"; scriptsetattributeattribute:"synopsis"...

VPNcheckpoint.txt

Situation: Employees should be allowed to access your company network from remote by VPN. You want to make sure, that only the hardware of your own company is allowed to access the network on the VPN. This because your company hardware uses a hardened operating system personal firewall,...

CVE-2005-4177

The CVE-2005-4177 entry concerns an XSS vulnerability in Magic Book Personal and Professional 2.0, specifically in the book.cfm component where the StartRow parameter is not properly sanitized. The vulnerability could allow remote attackers to inject arbitrary web script or HTML, as documented by...

CVE-2005-4177: Undefined Security Weakness

Cross-site scripting XSS vulnerability in book.cfm in Magic Book Personal and Professional 2.0 allows remote attackers to inject arbitrary web script or HTML via the StartRow parameter...

CVE-2005-4071

Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ForumID parameter in viewforum.cfm, and 2 ForumID, 3 Thread, and 4 ThreadID parameters in viewthread.cfm...

CVE-2005-4071

CVE-2005-4071 affects CFMagic Magic Forum Personal 2.5 and earlier. The vulnerabilities are SQL injection in the web interface: (1) ForumID in view_forum.cfm and (2) ForumID, (3) Thread, and (4) ThreadID in view_thread.cfm, allowing remote attackers to execute arbitrary SQL commands. The NVD entr...

CVE-2005-4072

The CVE describes a cross-site scripting (XSS) vulnerability in CFMagic Magic Forum Personal 2.5 and earlier, where an attacker can inject arbitrary script via the Words parameter in search_forums.cfm used in the “Search For:” field. The available records confirm the affected software and the inp...

CVE-2005-4072

Cross-site scripting XSS vulnerability in CFMagic Magic Forum Personal 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the Words parameter in searchforums.cfm, as used in the "Search For:" field...

CVE-2005-4071: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ForumID parameter in viewforum.cfm, and 2 ForumID, 3 Thread, and 4 ThreadID parameters in viewthread.cfm...

Magic List Pro - view_archive.cfm?ListID SQL Injection

Magic List Pro - viewarchive.cfm?ListID SQL Injection source: https://www.securityfocus.com/bid/15774/info CFMagic Products are prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. These vulnerabilities allow an attacker to...

CVE-2005-4072: Undefined Security Weakness

Cross-site scripting XSS vulnerability in CFMagic Magic Forum Personal 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the Words parameter in searchforums.cfm, as used in the "Search For:" field...

Magic Forum Personal SQL&XSS vuln.

Magic Forum Personal SQL&XSS vuln. Vuln. dicovered by : r0t Date: 6 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/magic-forum-personal-sqlxss-vuln.html vendor:www.cfmagic.com/products/magicforumper.cfm affected version:2.5 and prior Product Description: Magic Forum Personal is ou...

CVE-2005-3664: Undefined Security Weakness

Heap-based buffer overflow in Kaspersky Anti-Virus Engine, as used in Kaspersky Personal 5.0.227, Anti-Virus On-Demand Scanner for Linux 5.0.5, and F-Secure Anti-Virus for Linux 4.50 allows remote attackers to execute arbitrary code via a crafted CHM file...

CVE-2002-2161

Kerio Personal Firewall KPF 2.1.4 and earlier allows remote attackers to cause a denial of service hang and CPU consumption via a SYN packet flood...

CVE-2002-2161

Kerio Personal Firewall (KPF) 2.1.4 and earlier is affected by a denial-of-service vulnerability where remote attackers can trigger a SYN packet flood, causing the firewall to hang and consume CPU. The description available specifies the impact but does not provide deeper root-cause details, affe...

CVE-2002-2161: Undefined Security Weakness

Kerio Personal Firewall KPF 2.1.4 and earlier allows remote attackers to cause a denial of service hang and CPU consumption via a SYN packet flood...

Personal Web Sharing overflow

It was possible to kill the Personal Web Sharing service by sending it a too long request. A cracker may exploit this vulnerability to make your web server crash continually. OpenVAS Vulnerability Test $Id: PWSDoS.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Personal Web Sharing overflow...

Personal Web Sharing Overflow DoS Vulnerability

It was possible to kill the Personal Web Sharing service by sending it a too long request. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...